US10548012B2 - Method, system and apparatus for negotiating security capabilities during movement of UE - Google Patents

Method, system and apparatus for negotiating security capabilities during movement of UE Download PDF

Info

Publication number
US10548012B2
US10548012B2 US15/408,684 US201715408684A US10548012B2 US 10548012 B2 US10548012 B2 US 10548012B2 US 201715408684 A US201715408684 A US 201715408684A US 10548012 B2 US10548012 B2 US 10548012B2
Authority
US
United States
Prior art keywords
security capabilities
sgsn
network
mme
related keys
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
US15/408,684
Other versions
US20170127284A1 (en
Inventor
Chengdong HE
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Family has litigation
First worldwide family litigation filed litigation Critical https://patents.darts-ip.com/?family=40518035&utm_source=google_patent&utm_medium=platform_link&utm_campaign=public_patent_search&patent=US10548012(B2) "Global patent litigation dataset” by Darts-ip is licensed under a Creative Commons Attribution 4.0 International License.
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to US15/408,684 priority Critical patent/US10548012B2/en
Publication of US20170127284A1 publication Critical patent/US20170127284A1/en
Application granted granted Critical
Publication of US10548012B2 publication Critical patent/US10548012B2/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/08—Access security
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/107—Network architectures or network communication protocols for network security for controlling access to devices or network resources wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • H04L63/205—Network architectures or network communication protocols for network security for managing network security; network security policies in general involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M1/00—Substation equipment, e.g. for use by subscribers
    • H04M1/66—Substation equipment, e.g. for use by subscribers with means for preventing unauthorised or fraudulent calling
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
    • H04W12/0431—Key distribution or pre-distribution; Key agreement
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
    • H04W12/0433—Key management protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W60/00—Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
    • H04W60/04—Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration using triggered events
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/02—Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of mobility data, e.g. between HLR, VLR or external networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/22—Processing or transfer of terminal data, e.g. status or physical capabilities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W80/00—Wireless network protocols or protocol adaptations to wireless operation
    • H04W80/02—Data link layer protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
    • H04W88/12—Access point controller devices

Abstract

A method for negotiating security capabilities during movement of a User Equipment (UE) includes the following steps: a target network entity receives a Routing Area Update (RAU) Request from the UE; the entity obtains Authentication Vector (AV)-related keys deduced according to a root key, and sends the selected security algorithm to the UE; and the UE deduces the AV-related keys according to the root key of the UE. A system, SGSN, and MME for negotiating security capabilities during movement of a UE are also disclosed. The present invention is applicable to security capability negotiation between the UE and the network.

Description

CROSS-REFERENCE TO RELATED APPLICATIONS
This application is a continuation of U.S. patent application Ser. No. 14/728,687, filed on Jun. 2, 2015, which is a continuation of U.S. patent application Ser. No. 12/717,385, filed on Mar. 4, 2010, which is a continuation of International Application No. PCT/CN2008/072486, filed on Sep. 24, 2008. The International Application claims priority to Chinese Patent Application No. 200710181068.4, filed on Sep. 29, 2007. The afore-mentioned patent applications are hereby incorporated by reference in their entireties.
FIELD OF THE INVENTION
The present invention relates to communication technologies, and in particular, to a method, system, and apparatus for negotiating security capabilities during movement of a User Equipment (UE).
BACKGROUND OF THE INVENTION
A radio network includes two parts: radio access network and core network. A Long Term Evolution (LTE) radio core network includes a Mobility Management Entity (MME), which implements mobility management and user authentication like a Serving GPRS Support Node (SGSN) in a 2G/3G network. When the UE is idle in the 2G/3G network or the LTE network, the UE needs to negotiate Non-Access Signaling (NAS) security capabilities with the SGSN or MME to ensure normal receiving of the signaling and the security of the communication system.
When the UE in an idle state that accesses the network through an LTE radio access network, the UE may move to a routing area of a 2G GSM Edge Radio Access Network (GERAN) or a 3G UMTS Terrestrial Radio Access Network (UTRAN), and may access the access network through the 2G/3G network again. In this case, Routing Area Update (RAU) between Radio Access Technologies (inter-RAT) occurs; that is, an RAU process between heterogeneous networks occurs. In this process, the entity for negotiating security capabilities for the UE changes, for example, from an MME to an SGSN. The security capabilities of such entities are not necessarily the same. Therefore, it is necessary to perform the security capability negotiation process again to ensure security in the interaction between the UE and the network in the subsequent process.
When the UE moves from an LTE network to a UTRAN network, the RAU process involves negotiation of the ciphering algorithm and the integrity protection algorithm between the UE and the Radio Network Controller (RNC), and negotiation of the ciphering key and the integrity protection key.
When the UE moves from an LTE network to a GERAN network, the RAU process involves negotiation of the ciphering algorithm and the ciphering key between the UE and the 2G SGSN.
The prior art provides no method for negotiating security capabilities in the RAU process between heterogeneous networks. Therefore, when the UE moves from an LTE network to a 2G/3G network, the security capability negotiation is not supported, and the security is not ensured in the subsequent interaction between the UE and the network.
SUMMARY OF THE INVENTION
The embodiments of the present invention provide a method for negotiating security capabilities during movement of a UE, so that the security capabilities can be negotiated when the UE in the idle state moves from an LTE network to a 2G/3G network.
The embodiments of the present invention provide a system for negotiating security capabilities during movement of a UE, so that the security capabilities can be negotiated when the UE in the idle state moves from an LTE network to a 2G/3G network.
The embodiments of the present invention provide an SGSN which obtains Authentication Vector (AV)-related keys when an UE in the idle state moves from an LTE network to a 2G/3G network.
The embodiments of the present invention provide an MME which sends AV-related keys to the 2G/3G network when an UE in the idle state moves from an LTE network to a 2G/3G network.
The technical solution of the present invention is implemented in the following way:
A method for negotiating security capabilities during movement of a UE is provided. When the UE moves from an LTE source network to a 2G/3G target network, the method includes:
by a target network entity, receiving an RAU Request message sent by the UE, obtaining the security capabilities supported by the UE, and obtaining AV-related keys deduced according to a root key;
selecting a security algorithm according to the security capabilities supported by the UE and sending the selected security algorithm to the UE; and
deducing, by the UE, the AV-related keys according to the root key of the UE.
With reference to the above method, the obtaining Authentication Vector (AV)-related keys deduced according to a root key comprises:
a Serving GPRS Support Node (SGSN) that serves as the target network entity obtains the root key in a mobility management context response received from a Mobility Management Entity (MME) and deduces the AV-related keys according to the obtained root key; or
the SGSN that serves as the target network entity obtains the AV-related keys in the mobility management context response received from the MME, wherein the AV-related keys are deduced by the MME according to the root key of the MME.
With reference to the above method, if the target network is a 2G network, the AV-related keys comprise at least a Ciphering Key (Kc) or a value derived from the Kc through unidirectional transformation; and
if the target network is a 3G network, the AV-related keys comprise at least an Integrity Protection Key (IK) and a Ciphering Key (CK), or comprise at least values derived from the IK and the CK through unidirectional transformation.
With reference to the above method, the obtaining security capabilities supported by the UE comprises:
a Serving GPRS Support Node that serves as the target network entity, obtains the security capabilities supported by the UE from the RAU request sent by the UE; or
the SGSN that serves as the target network entity obtains the security capabilities supported by the UE from a mobility management context response received from a Mobility Management Entity.
With reference to the above system, the target network entity is a Serving GPRS Support Node (SGSN) in a 3G network, and the SGSN comprises:
a key obtaining module adapted to obtain the root key in a mobility management context response from a Mobility Management Entity (MME) after receiving the RAU Request message sent by the UE, and deduce the AV-related keys according to the root key; or
adapted to obtain the AV-related keys in the mobility management context response from the MME, wherein the AV-related keys are deduced by the MME according to the root key of the MME.
With reference to the above system, further comprising the MME, which is applicable when the UE moves from the LTE source network to the 2G/3G target network, wherein:
if the key obtaining module is adapted to obtain the root key from the mobility management context response received from the MME, the MME comprises: a storing module adapted to store the root key; and a first sending module adapted to send the root key stored in the storing module to the SGSN through the mobility management context response after receiving a mobility management context request sent by the SGSN;
if the key obtaining module is adapted to obtain the AV-related keys from the mobility management context response received from the MME, wherein the AV-related keys are deduced by the MME according to the root key of the MME, the MME comprises: a key deducing module adapted to deduce the AV-related keys according to the root key after receiving the mobility management context request sent by the SGSN; and a second sending module adapted to send the AV-related keys obtained by the key deducing module to the SGSN through the mobility management context response.
A system for negotiating security capabilities during movement of a UE is provided. The system includes a UE and a target network entity.
The UE is adapted to: send an RAU Request message to the target network entity when the UE moves from an LTE source network to a 2G/3G target network, receive a selected security algorithm sent by the target network entity, and deduce AV-related keys according to a root key of the UE.
The target network entity is adapted to: receive the RAU Request message sent by the UE, obtain the security capabilities supported by the UE and the AV-related keys deduced according to the root key, select a security algorithm according to the security capabilities supported by the UE, and send the selected security algorithm to the UE.
With reference to the above system, the target network entity is a Serving GPRS Support Node (SGSN) in a 2G network, and the SGSN comprises:
a key obtaining module adapted to obtain the root key in a mobility management context response from a Mobility Management Entity (MME) after receiving the RAU Request message sent by the UE, and deduce the AV-related keys according to the root key; or, obtain the AV-related keys in the mobility management context response from the MME, wherein the AV-related keys are deduced by the MME according to the root key of the MME; and
a selecting and sending module adapted to obtain the security capabilities supported by the UE, select a security algorithm according to the security capabilities supported by the UE, and send the selected security algorithm to the UE.
An SGSN is provided, which is applicable when a UE moves from an LTE source network to a 2G/3G target network. The SGSN includes a key obtaining module.
The key obtaining module is adapted to: obtain a root key in a mobility management context response received from an MME and deduce AV-related keys according to the root key; or obtain the AV-related keys in the mobility management context response from the MME, where the AV-related keys are deduced by the MME according to the root key of the MME.
An MME is provided, which is applicable when a UE moves from an LTE source network to a 2G/3G target network. The MME includes a key deducing module and a sending module.
The key deducing module is adapted to deduce AV-related keys according to a root key after receiving a mobility management context request sent by an SGSN.
The sending module is adapted to send the AV-related keys obtained by the key deducing module to the SGSN through a mobility management context response.
Compared with the prior art, the technical solution of the present invention brings the following benefits: When the UE moves from an LTE source network to a 2G/3G target network, the target network entity receives the RAU Request sent by the UE, and obtains the security capabilities supported by the UE and the AV-related keys deduced according to the root key; the UE deduces the AV-related keys according to the root key of the UE, thus implementing key negotiation of the security capability negotiation; the target network entity selects a security algorithm according to the security capabilities supported by the UE, and sends the selected security algorithm to the UE, thus implementing security algorithm negotiation of the security capability negotiation. Therefore, when the UE moves from an LTE source network to a 2G/3G target network, the UE can negotiate security capabilities with the network, thus ensuring security in the subsequent interaction between the UE and the network.
BRIEF DESCRIPTION OF THE DRAWINGS
FIG. 1 is a flowchart of a method for negotiating security capabilities during movement of a UE according to a first embodiment of the present invention;
FIG. 2 is a flowchart of a method for negotiating security capabilities during movement of a UE according to a second embodiment of the present invention;
FIG. 3 is a flowchart of a method for negotiating security capabilities during movement of a UE according to a third embodiment of the present invention;
FIG. 4 is a flowchart of a method for negotiating security capabilities during movement of a UE according to a fourth embodiment of the present invention;
FIG. 5 is a flowchart of a method for negotiating security capabilities during movement of a UE according to a fifth embodiment of the present invention;
FIG. 6 is a flowchart of a method for negotiating security capabilities during movement of a UE according to a sixth embodiment of the present invention;
FIG. 7 shows a system for negotiating security capabilities during movement of a UE according to an embodiment of the present invention;
FIG. 8 shows a structure of a 2G system and external connection relations for negotiating security capabilities during movement of a UE according to a seventh embodiment of the present invention;
FIG. 9 shows a structure of a 3G system and external connection relations for negotiating security capabilities during movement of a UE according to an eighth embodiment of the present invention;
FIG. 10 shows an SGSN according to a tenth embodiment of the present invention; and
FIG. 11 shows an MME according to an eleventh embodiment of the present invention.
 DETAILED DESCRIPTION OF THE EMBODIMENTS
The present invention is detailed below with reference to accompanying drawings and exemplary embodiments.
In the method for negotiating security capabilities during movement of a UE, when the UE moves from an LTE source network to a 2G/3G target network, the target network entity receives the RAU Request sent by the UE, and obtains the security capabilities supported by the UE and the AV-related keys deduced according to the root key; a security algorithm is selected according to the security capabilities supported by the UE, and the selected security algorithm is sent to the UE; the UE deduces the AV-related keys according to the root key of the UE.
The first, second, and third embodiments give details of the process of negotiating security capabilities when the UE moves from an LTE network to a 3G network. After the UE in the idle state accesses the LTE network, the UE moves from the LTE source network to the 3G target network, which triggers a process of negotiating security capabilities. The target network entities are a 3G SGSN and an RNC.
First Embodiment
In this embodiment, the 3G SGSN obtains the AV-related keys from the MME directly, where the AV-related keys are deduced according to the root key.
FIG. 1 is a flowchart of a method for negotiating security capabilities during movement of a UE according to the first embodiment of the present invention. As shown in FIG. 1, the method includes the following steps:
Step 100: The UE sends an RAU Request to the 3G SGSN through an RNC.
The RAU Request sent by the UE to the 3G SGSN in this step not only carries the parameters well known to those skilled in the art, for example, Temporary Mobile Subscriber Identifier (TMSI), but also may carries the security capabilities supported by the UE, for example, a ciphering algorithm and/or an integrity protection algorithm.
Steps 101-103: The 3G SGSN obtains the AV-related keys from the MME through a mobility management context message, where the AV-related keys are deduced according to the root key.
Specifically, the 3G SGSN sends a mobility management context request to the MME. The MME deduces the AV-related keys through a unidirectional transformation function according to its own root key Kasme, where the AV-related keys include an integrity protection key IK and a ciphering key CK, or an IK′ and a CK′ further derived from the IK and the CK through unidirectional transformation by the MME; then the MME returns a mobility management context response that carries the AV-related keys to the 3G SGSN; and the 3G SGSN uses the AV-related keys as the current ciphering key and integrity protection key.
In step 100, if the RAU Request sent by the UE to the 3G SGSN carries no security capabilities supported by the UE, the mobility management context response returned by the MME to the 3G SGSN in step 103 needs to further carry the security capabilities supported by the UE.
A unidirectional transformation process transforms a source parameter to a target parameter through an algorithm, but cannot transform the target parameter back to the source parameter. For example, a CK is obtained through the algorithm f(Kasme), but it is not possible to deduce the Kasme from the CK through any inverse algorithm, which is known as unidirectional transformation.
Steps 104-106: The 3G SGSN sends a Security Mode Command (SMC) message to the RNC. The message carries the security capabilities supported by the UE, security capabilities allowed by the system, and a security key. According to the security capabilities supported by the UE, the security capabilities allowed by the system, and the security capabilities supported by the RNC, the RNC selects security algorithms, including a ciphering algorithm and an integrity protection algorithm, and then sends an SMC message that carries the security capabilities supported by the UE and the selected security algorithm to the UE.
The SMC message may also be carried in the RAU Accept message.
Steps 107-109: The UE deduces the AV-related keys according to its own root key, where the AV-related keys include IK and CK, or an IK′ and a CK′ further derived from the IK and the CK through unidirectional transformation, and uses them as the current ciphering key and integrity protection key respectively. According to the security capabilities supported by the UE from the RNC and the security capabilities stored in the UE, the UE judges whether any bidding down attack exists, and then sends an SMC Complete message to the RNC. The RNC sends an SMC Complete message that carries the selected security algorithm to the 3G SGSN.
The SMC Complete message may also be carried in an RAU Complete message.
Steps 110-111: The 3G SGSN sends an RAU Accept message to the UE. After receiving the message, the UE returns an RAU Complete message to the 3G SGSN.
Second Embodiment
In this embodiment, the 3G SGSN obtains a root key from the MME, and then deduces AV-related keys according to the root key.
FIG. 2 is a flowchart of a method for negotiating security capabilities during movement of a UE according to the first embodiment of the present invention. As shown in FIG. 2, the method includes the following steps:
Step 200: The UE sends an RAU Request to the 3G SGSN through an RNC.
The RAU Request sent by the UE to the 3G SGSN in this step not only carries the parameters well known to those skilled in the art, for example, TMSI, but also may carries the security capabilities supported by the UE, for example, a ciphering algorithm and/or an integrity protection algorithm.
Steps 201-203: The 3G SGSN obtains the root key from the MME through a mobility management context message, and then deduces the AV-related keys according to the root key.
Specifically, the 3G SGSN sends a mobility management context request to the MME. The MME returns a mobility management context response that carries the root key to the 3G SGSN. The 3G SGSN deduces the AV-related keys through a unidirectional transformation function according to the root key Kasme in the response, where the AV-related keys include an integrity protection key IK and a ciphering key CK, or an IK′ and a CK′ further derived from the IK and the CK through unidirectional transformation by the 3G SGSN, and uses them as the current ciphering key and integrity protection key respectively.
In step 200, if the RAU request sent by the UE to the 3G SGSN carries no security capabilities supported by the UE, the mobility management context response returned by the MME to the 3G SGSN in step 103 needs to further carry the security capabilities supported by the UE.
Steps 204-206: The 3G SGSN sends an SMC message to the RNC. The message carries the security capabilities supported by the UE, security capabilities allowed by the system, and a security key. According to the security capabilities supported by the UE, the security capabilities allowed by the system, and the security capabilities supported by the RNC, the RNC selects security algorithms, including a ciphering algorithm and an integrity protection algorithm, and then sends an SMC message that carries the security capabilities supported by the UE and the selected security algorithm to the UE.
The SMC message may also be carried in the RAU Accept message.
Steps 207-209: The UE deduces the AV-related keys (including IK and CK) according to its own root key, where the AV-related keys include IK and CK, or an IK′ and a CK′ further derived from the IK and the CK through unidirectional transformation, and uses them as the current ciphering key and integrity protection key respectively. According to the security capabilities supported by the UE from the RNC and the security capabilities stored in the UE, the UE judges whether any bidding down attack exists, and then sends an SMC Complete message to the RNC. The RNC sends an SMC Complete message that carries the selected security algorithm to the 3G SGSN.
The SMC Complete message may also be carried in an RAU Complete message.
Steps 210-211: The 3G SGSN sends an RAU Accept message to the UE. After receiving the message, the UE returns an RAU Complete message to the 3G SGSN.
Third Embodiment
In this embodiment, the UE of the 3G SGSN obtains the AV-related keys through an Authentication and Key Agreement (AKA) process.
FIG. 3 is a flowchart of a method for negotiating security capabilities during movement of a UE according to the third embodiment of the present invention. As shown in FIG. 3, the method includes the following steps:
Step 300: The UE sends an RAU Request to the 3G SGSN through an RNC.
Steps 301-302: The 3G SGSN obtains the mobility management context from the MME through a mobility management context message.
In step 300, if the RAU Request sent by the UE to the 3G SGSN carries no security capabilities supported by the UE, the mobility management context response returned by the MME to the 3G SGSN in step 302 needs to further carry the security capabilities supported by the UE.
Step 303: Through an AKA process, the 3G SGSN and the UE obtain the AV-related keys (IK and CK) from a Home Subscriber Server (HSS).
Steps 304-306: The 3G SGSN sends an SMC message to the RNC. The message carries the security capabilities supported by the UE, security capabilities allowed by the system, and a security key. According to the security capabilities supported by the UE, the security capabilities allowed by the system, and the security capabilities supported by the RNC, the RNC selects security algorithms, including a ciphering algorithm and an integrity protection algorithm, and then sends an SMC message that carries the security capabilities supported by the UE and the selected security algorithm to the UE.
The SMC message may also be carried in the RAU Accept message.
Steps 307-310 are the same as steps 108-111, and thus are not repeatedly described.
The fourth, fifth, and sixth embodiments give details of the process of negotiating security capabilities when the UE moves from an LTE network to a 2G network. After the UE in the idle state accesses the LTE network, the UE moves from the LTE source network to the 2G target network, which triggers a process of negotiating security capabilities. The target network entity is a 2G SGSN.
Fourth Embodiment
In this embodiment, the 2G SGSN obtains the AV-related keys from the MME directly, where the AV-related keys are deduced according to the root key.
FIG. 4 is a flowchart of a method for negotiating security capabilities during movement of a UE according to the fourth embodiment of the present invention. As shown in FIG. 4, the method includes the following steps:
Step 400: The UE sends an RAU Request to the 2G SGSN.
The RAU Request sent by the UE to the 2G SGSN in this step not only carries the parameters well known to those skilled in the art, for example, TMSI, but also may carries the security capabilities supported by the UE, for example, a ciphering algorithm and/or an integrity protection algorithm.
In this step, the UE sends an RAU Request to the 2G SGSN through a Base Station System (BSS). For ease of description below, the communication performed between the UE and the 2G SGSN through a BSS is described briefly as the communication between the UE and the 2G SGSN.
Steps 401-403: The 2G SGSN obtains the AV-related keys from the mobility management context response received from the MME, where the AV-related keys are deduced according to the root key.
Specifically, the 2G SGSN sends a mobility management context request to the MME. The MME deduces the AV-related keys through a unidirectional transformation function according to its own root key Kasme. The AV-related keys include a ciphering key Kc, or Kc′ further derived from the Kc through unidirectional transformation by the MME; then the MME returns a mobility management context response that carries the AV-related keys to the 2G SGSN; and the 2G SGSN uses the AV-related keys as the current ciphering key.
In step 400, if the RAU Request sent by the UE to the 2G SGSN carries no security capabilities supported by the UE, the mobility management context response returned by the MME to the 2G SGSN in step 403 needs to further carry the security capabilities supported by the UE.
Steps 404-405: The 2G SGSN selects security algorithms (including a ciphering algorithm) according to the security capabilities supported by the UE, the security capabilities allowed by the system, and the security capabilities supported by the 2G SGSN, and then sends an RAU Accept message to the UE, where the message carries the security capabilities supported by the UE and the selected security algorithm.
Steps 406-407: The UE deduces the AV-related keys according to its own root key, The AV-related keys include a Kc, or a Kc′ further derived from the Kc through unidirectional transformation, and uses the AV-related keys as the current ciphering key. According to the security capabilities supported by the UE from the 2G SGSN and the security capabilities stored in the UE, the UE judges whether any bidding down attack exists, and then sends an RAU Complete message to the 2G SGSN.
Fifth Embodiment
In this embodiment, the 2G SGSN obtains a root key from the MME, and then deduces AV-related keys according to the obtained root key.
FIG. 5 is a flowchart of a method for negotiating security capabilities during movement of a UE according to the fifth embodiment of the present invention. As shown in FIG. 5, the method includes the following steps:
Step 500: The UE sends an RAU Request to the 2G SGSN.
Steps 501-502: The 2G SGSN obtains the root key from the mobility management context response received from the MME.
Specifically, the 2G SGSN sends a mobility management context request to the MME, and the MME returns a mobility management context response that carries the root key to the 2G SGSN.
In step 500, if the RAU Request sent by the UE to the 2G SGSN carries no security capabilities supported by the UE, the mobility management context response returned by the MME to the 2G SGSN in step 502 needs to further carry the security capabilities supported by the UE.
Step 503: The 2G SGSN deduces the AV-related keys according to the obtained root key, and selects security algorithms (including a ciphering algorithm) according to the security capabilities supported by the UE, the security capabilities allowed by the system, and the security capabilities supported by the 2G SGSN.
Steps 504-506 are the same as steps 405-407, and are not repeatedly described.
Sixth Embodiment
In this embodiment, the 2G SGSN obtains the AV-related keys through a 2G re-authentication process.
FIG. 6 is a flowchart of a method for negotiating security capabilities during movement of a UE according to the sixth embodiment of the present invention. As shown in FIG. 6, the method includes the following steps:
Step 600: The UE sends an RAU Request to the 2G SGSN.
Steps 601-602: The 2G SGSN sends a mobility management context request to the MME, and the MME returns a response that carries the mobility management context to the 2G SGSN.
In step 600, if the RAU Request sent by the UE to the 2G SGSN carries no security capabilities supported by the UE, the mobility management context response returned by the MME to the 2G SGSN in step 602 needs to further carry the security capabilities supported by the UE.
Step 603: The 2G SGSN and the UE obtain the AV-related key (Kc) from the HSS through a 2G re-authentication process.
Steps 604-606: The 2G SGSN selects security algorithms (including a ciphering algorithm) according to the security capabilities supported by the UE, the security capabilities allowed by the system, and the security capabilities supported by the 2G SGSN, and then sends an RAU Accept message to the UE, where the message carries the security capabilities supported by the UE and the selected security algorithm. The UE returns an RAU Complete message to the 2G SGSN.
A system for negotiating security capabilities during movement of a UE is provided. As shown in FIG. 7, the system includes a UE 100 and a target network entity 200.
The UE 100 is adapted to: send an RAU Request message to the target network entity 200 when the UE moves from an LTE source network to a 2G/3G target network, receive a selected security algorithm sent by the target network entity 200, and deduce AV-related keys according to a root key of the UE.
The target network entity 200 is adapted to: receive the RAU Request message sent by the UE 100, obtain the security capabilities supported by the UE 100 and the AV-related keys deduced according to the root key, select a security algorithm according to the security capabilities supported by the UE 100, and send the selected security algorithm to the UE 100.
The seventh and eighth embodiments take a 2G system and a 3G system as examples for negotiating security capabilities during movement of the UE.
Seventh Embodiment
In a 2G system for negotiating security capabilities during movement of the UE, the target network entity is an SGSN in the 2G network, namely, a 2G SGSN 210. FIG. 8 shows a structure of a 2G system and external connection relations for negotiating security capabilities during movement of a UE according to an embodiment of the present invention. As shown in FIG. 8, the SGSN 210 includes a key obtaining module 211 and a selecting and sending module 212.
The key obtaining module 211 is adapted to: obtain a root key in a mobility management context response from an MME after receiving an RAU Request sent by the UE, and deduce AV-related keys according to the root key.
The selecting and sending module 212 is adapted to: obtain the security capabilities supported by the UE 100, select a security algorithm according to the security capabilities supported by the UE 100, and send the selected security algorithm to the UE 100.
As shown in FIG. 8, the 2G system for negotiating security capabilities during movement of the UE according to this embodiment further includes an MME 310, which is applicable when the UE moves from an LTE source network to a 2G/3G target network. The MME 310 includes a storing module 311 and a first sending module 312.
The storing module 311 is adapted to store a root key.
The first sending module 312 is adapted to send the root key stored in the storing module 311 to the SGSN through a mobility management context response after receiving the mobility management context request sent by the SGSN.
Alternatively, if the key obtaining module 211 is adapted to obtain the AV-related key from the mobility management context response from the MME, where the AV-related key is deduced by the MME according to the root key of the MME, the MME includes a key deducing module and a second sending module. The key deducing module is adapted to deduce AV-related keys according to a root key after receiving a mobility management context request sent by an SGSN. The second sending module is adapted to send the AV-related keys obtained by the key deducing module to the SGSN through a mobility management context response.
Eighth Embodiment
In the 3G system for negotiating security capabilities during movement of the UE, the target network entities 200 include an SGSN in the 3G network, namely, a 3G SGSN 220, and an RNC 230. FIG. 9 shows a structure of a 3G system and external connection relations for negotiating security capabilities during movement of a UE according to an embodiment of the present invention.
As shown in FIG. 9, the SGSN 220 in the system includes a key obtaining module 221 and a message sending module 222. The key obtaining module 221 is adapted to obtain the AV-related keys from the mobility management context response received from the MME, where the AV-related keys are deduced by the MME according to the root key of the MME. The message sending module 222 is adapted to send an SMC message to the RNC 230 for processing, where the message carries the security capabilities supported by the UE, the security capabilities allowed by the system, and the security key.
Accordingly, the MME 230 in this embodiment includes a key deducing module 321 and a second sending module 322.
The key deducing module 321 is adapted to deduce AV-related keys according to a root key after receiving a mobility management context request sent by an SGSN.
The second sending module 322 is adapted to send the AV-related keys obtained by the key deducing module 321 to the SGSN through a mobility management context response.
As in the seventh embodiment, if the SGSN obtains the root key from the MME directly and deduces the AV-related keys, the MME includes a storing module 311 and a first sending module 312. The storing module 311 is adapted to store a root key. The first sending module 312 is adapted to send the root key stored in the storing module 311 to the SGSN through a mobility management context response after receiving the mobility management context request sent by the SGSN.
An SGSN is provided, which is applicable when a UE moves from an LTE source network to a 2G/3G target network. The ninth and tenth embodiments deal with the SGSN.
Ninth Embodiment
For the scenario where the UE moves from an LTE source network to a 3G target network, this embodiment provides an SGSN. The SGSN includes a key obtaining module, which is adapted to: obtain a root key in a mobility management context response received from an MME and deduce AV-related keys according to the root key.
In other embodiments of the present invention, the key obtaining module is adapted to obtain the AV-related keys from the mobility management context response received from the MME, where the AV-related keys are deduced by the MME according to the root key of the MME.
Tenth Embodiment
The SGSN in this embodiment is applicable when the UE moves from an LTE source network to a 2G target network. As shown in FIG. 10, the SGSN includes a key obtaining module 211 and a selecting and sending module 212.
The key obtaining module 211 is adapted to: obtain a root key in a mobility management context response received from an MME and deduce AV-related keys according to the root key.
The selecting and sending module 212 is adapted to: obtain the security capabilities supported by the UE 100, select a security algorithm according to the security capabilities supported by the UE 100, and send the selected security algorithm to the UE 100.
In other embodiments of the present invention, the key obtaining module is adapted to obtain the AV-related keys from the mobility management context response received from the MME, where the AV-related keys are deduced by the MME according to the root key of the MME.
An MME is provided, which is applicable when a UE moves from an LTE source network to a 2G/3G target network.
Eleventh Embodiment
As shown in FIG. 11, if the SGSN obtains the AV-related keys deduced by the MME according to the root key, the MME includes a key deducing module 331 and a sending module 332. The key deducing module 331 is adapted to deduce AV-related keys according to a root key after receiving a mobility management context request sent by an SGSN. The sending module 332 is adapted to send the AV-related keys obtained by the key deducing module 331 to the SGSN through a mobility management context response.
In conclusion, through the technical solution of the present invention, when the UE moves from an LTE source network to a 2G/3G target network, the target network entity receives the RAU Request sent by the UE, and then obtains the security capabilities supported by the UE and the AV-related keys deduced according to the root key; the UE deduces the AV-related keys according to the root key of the UE, thus implementing key negotiation; the target network entity selects a security algorithm according to the security capabilities supported by the UE, and then sends the selected security algorithm to the UE, thus implementing security algorithm negotiation. Therefore, when the UE moves from an LTE source network to a 2G/3G target network, the UE can negotiate security capabilities with the network, thus ensuring security in the subsequent interaction between the UE and the network.
The serial numbers of the embodiments given above are for clear description only, and do not represent the order of preference. The word “step” does not represent the sequence of performing the method in the embodiments of the present invention.
Described above are only exemplary embodiments of the present invention, but not intended to limit the scope of protection of the present invention. Any modification, equivalent replacement, and improvement made without departing from the spirit and principle of the present invention fall within the scope of protection of the present invention.

Claims (20)

What is claimed is:
1. A communications system, comprising:
a mobility management entity (MME) in a long term evolution (LTE) network; and
a serving general packet radio service (GPRS) support node (SGSN) in a second generation or third generation (2G/3G) network; wherein:
the SGSN is configured to:
receive a routing area update (RAU) request from a user equipment (UE) in an idle state moving from the LTE network to the 2G/3G network; and
send a context request according to the RAU request; and
the MME is configured to:
receive the context request;
derive authentication vector (AV)-related keys according to a key of the MME; and
send a context response to the SGSN, wherein the context response comprises the AV-related keys, and the AV-related keys comprise an integrity protection key (IK) and a ciphering key (CK).
2. The system according to claim 1, wherein the system further comprises a radio network controller (RNC) in the 2G/3G network;
the SGSN is further configured to send the AV-related keys; and
the RNC is configured to receive the AV-related keys.
3. The system according to claim 2, wherein:
the SGSN is further configured to send security capabilities allowed by the 2G/3G network; and
the RNC is further configured to receive the security capabilities allowed by the 2G/3G network, select a security algorithm according to the security capabilities allowed by the 2G/3G network, and send the selected security algorithm to the UE.
4. The system according to claim 3, wherein the RAU request carries security capabilities supported by the UE.
5. The system according to claim 3, wherein the context response further comprises security capabilities supported by the UE.
6. The system according to claim 2, wherein the RAU request carries security capabilities supported by the UE.
7. The system according to claim 2, wherein the context response further comprises security capabilities supported by the UE.
8. The system according to claim 1, wherein the RAU request carries security capabilities supported by the UE.
9. The system according to claim 1, wherein the context response further comprises security capabilities supported by the UE.
10. The system according to claim 1, wherein the key of the MME is Kasme.
11. A communications method, comprising:
receiving, by a serving general packet radio service (GPRS) support node (SGSN) in a second generation or third generation (2G/3G) network, a routing area update (RAU) request from a user equipment (UE) in an idle state moving from a long term evolution (LTE) network to the 2G/3G network;
sending, by the SGSN, a context request according to the RAU request;
receiving, by a mobility management entity (MME) in the LTE network, the context request;
deriving, by the MME, authentication vector (AV)-related keys according to a key of the MME; and
sending, by the MME, a context response to the SGSN, wherein the context response comprises the AV-related keys, and the AV-related keys comprise an integrity protection key (IK) and a ciphering key (CK).
12. The method according to claim 11, wherein the method further comprises:
sending, by the SGSN, the AV-related keys; and
receiving, by a radio network controller (RNC) in the 2G/3G network, the AV-related keys.
13. The method according to claim 12, wherein the method further comprises:
sending, by the SGSN, security capabilities allowed by the 2G/3G network;
receiving, by the RNC, the security capabilities allowed by the 2G/3G network;
selecting, by the RNC, a security algorithm according to the security capabilities allowed by the 2G/3G network; and
sending, by the RNC, the selected security algorithm to the UE.
14. The method according to claim 13, wherein the RAU request carries security capabilities supported by the UE.
15. The method according to claim 13, wherein the context response further comprises security capabilities supported by the UE.
16. The method according to claim 12, wherein the RAU request carries security capabilities supported by the UE.
17. The method according to claim 12, wherein the context response further comprises security capabilities supported by the UE.
18. The method according to claim 11, wherein the RAU request carries security capabilities supported by the UE.
19. The method according to claim 11, wherein the context response further comprises security capabilities supported by the UE.
20. The method according to claim 11, wherein the key of the MME is Kasme.
US15/408,684 2007-09-29 2017-01-18 Method, system and apparatus for negotiating security capabilities during movement of UE Active US10548012B2 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US15/408,684 US10548012B2 (en) 2007-09-29 2017-01-18 Method, system and apparatus for negotiating security capabilities during movement of UE

Applications Claiming Priority (7)

Application Number Priority Date Filing Date Title
CN2007101810684A CN101399767B (en) 2007-09-29 2007-09-29 Method, system and apparatus for security capability negotiation during terminal moving
CN200710181068.4 2007-09-29
CN200710181068 2007-09-29
PCT/CN2008/072486 WO2009043278A1 (en) 2007-09-29 2008-09-24 A method, system and device for negotiating about safety ability while a terminal is moving
US12/717,385 US9060268B2 (en) 2007-09-29 2010-03-04 Negotiating security capabilities during movement of UE
US14/728,687 US9572027B2 (en) 2007-09-29 2015-06-02 Method, system and apparatus for negotiating security capabilities during movement of UE
US15/408,684 US10548012B2 (en) 2007-09-29 2017-01-18 Method, system and apparatus for negotiating security capabilities during movement of UE

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
US14/728,687 Continuation US9572027B2 (en) 2007-09-29 2015-06-02 Method, system and apparatus for negotiating security capabilities during movement of UE

Publications (2)

Publication Number Publication Date
US20170127284A1 US20170127284A1 (en) 2017-05-04
US10548012B2 true US10548012B2 (en) 2020-01-28

Family

ID=40518035

Family Applications (3)

Application Number Title Priority Date Filing Date
US12/717,385 Active 2030-01-15 US9060268B2 (en) 2007-09-29 2010-03-04 Negotiating security capabilities during movement of UE
US14/728,687 Active US9572027B2 (en) 2007-09-29 2015-06-02 Method, system and apparatus for negotiating security capabilities during movement of UE
US15/408,684 Active US10548012B2 (en) 2007-09-29 2017-01-18 Method, system and apparatus for negotiating security capabilities during movement of UE

Family Applications Before (2)

Application Number Title Priority Date Filing Date
US12/717,385 Active 2030-01-15 US9060268B2 (en) 2007-09-29 2010-03-04 Negotiating security capabilities during movement of UE
US14/728,687 Active US9572027B2 (en) 2007-09-29 2015-06-02 Method, system and apparatus for negotiating security capabilities during movement of UE

Country Status (4)

Country Link
US (3) US9060268B2 (en)
EP (1) EP2187561B1 (en)
CN (1) CN101399767B (en)
WO (1) WO2009043278A1 (en)

Families Citing this family (22)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101399767B (en) 2007-09-29 2011-04-20 华为技术有限公司 Method, system and apparatus for security capability negotiation during terminal moving
CN101873245B (en) * 2009-04-27 2013-04-24 华为终端有限公司 Method, device and network for establishing connections between home networks
CN101998395B (en) * 2009-08-27 2013-12-04 华为技术有限公司 Authentication vector acquisition method, home server and network system
CN101742498A (en) * 2009-12-18 2010-06-16 中兴通讯股份有限公司 Management method and system of vent key
CN102118810B (en) * 2010-02-10 2013-11-06 电信科学技术研究院 Method, system and equipment for avoiding path conversion in switching
CN101835151B (en) * 2010-04-16 2016-03-30 中兴通讯股份有限公司 The update method of air interface key and wireless access system
CN101835154B (en) * 2010-04-20 2016-03-30 中兴通讯股份有限公司 A kind of method and system setting up the air interface key of enhancing
CN102378168B (en) * 2010-08-17 2016-02-10 中兴通讯股份有限公司 The method of multisystem core net notice key and multisystem network
US8620317B2 (en) * 2011-02-16 2013-12-31 Htc Corporation Method and apparatus for communicating network features during a routing area update procedure
US8897751B2 (en) 2011-03-14 2014-11-25 Alcatel Lucent Prevention of eavesdropping type of attack in hybrid communication system
KR101873330B1 (en) 2011-10-04 2018-07-03 삼성전자 주식회사 Ciphering Controlling Method and Network System, Portable Device and operating Method thereof supporting the same
CN103702328B (en) * 2012-09-28 2017-11-21 中国电信股份有限公司 UIM clampings enter the authentication method and system of EPC networks
KR102123210B1 (en) * 2013-01-10 2020-06-15 닛본 덴끼 가부시끼가이샤 Mtc key management for key derivation at both ue and network
CN104244247B (en) * 2013-06-07 2019-02-05 华为技术有限公司 Non-Access Stratum, access layer security algorithm processing method and equipment
US10123228B2 (en) * 2013-08-15 2018-11-06 Nokia Technologies Oy Signaling support for devices with multiple and/or flexible form factors
EP3146741B1 (en) * 2014-05-20 2021-10-06 Nokia Technologies Oy Cellular network authentication control
RU2017132104A (en) * 2015-02-16 2019-03-18 Нек Корпорейшн COMMUNICATION SYSTEM, NODE DEVICE, COMMUNICATION TERMINAL, KEY CONTROL METHOD AND ENERGY INDEPENDENT READABLE COMPUTER READABLE MEDIA ON WHICH THE PROGRAM IS STORED
BR112017020874A2 (en) * 2015-04-08 2018-07-17 Huawei Technologies Co., Ltd. key improvement method of gprs system, sgsn device, eu, hlr / hss and gprs system.
EP3468239B1 (en) * 2016-07-04 2020-02-05 Huawei Technologies Co., Ltd. Method and apparatus for managing imsi state of terminal device
EP3756373B1 (en) 2018-02-19 2021-07-28 Telefonaktiebolaget LM Ericsson (publ) Supporting interworking and/or mobility between different wireless communication systems
CN110392369B (en) * 2018-04-16 2021-10-12 大唐移动通信设备有限公司 Method, equipment and device for updating short message service capability
WO2020090886A1 (en) * 2018-11-02 2020-05-07 Nec Corporation Method, ue, and network for providing kdf negotiation

Citations (74)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6028933A (en) 1997-04-17 2000-02-22 Lucent Technologies Inc. Encrypting method and apparatus enabling multiple access for multiple services and multiple transmission modes over a broadband communication network
US20020052200A1 (en) 2000-09-11 2002-05-02 Jari Arkko Secured map messages for telecommunications networks
US20020066011A1 (en) * 2000-11-28 2002-05-30 Nokia Corporation System for ensuring encrypted communication after handover
US20020071558A1 (en) 2000-12-11 2002-06-13 Sarvar Patel Key conversion system and method
WO2003037021A1 (en) 2001-10-19 2003-05-01 Nokia Corporation Forwarding a terminal identity between core network nodes
US20030139180A1 (en) 2002-01-24 2003-07-24 Mcintosh Chris P. Private cellular network with a public network interface and a wireless local area network extension
US20030169725A1 (en) 2000-05-17 2003-09-11 Kalle Ahmavaara Connections in a comunication system
CN1455556A (en) 2003-05-14 2003-11-12 东南大学 Wireless LAN safety connecting-in control method
US20040053607A1 (en) * 2000-10-13 2004-03-18 Hans Ronneke Communication system supporting wireless communication of packet data and method and arrangement relating thereto
EP1282321B1 (en) 2001-08-02 2005-02-09 Telefonaktiebolaget LM Ericsson (publ) System and method for load sharing within a core network
CN1589060A (en) 2004-09-30 2005-03-02 西安西电捷通无线网络通信有限公司 Method for realizing self surrogate function for mobile node
US20050047597A1 (en) * 2001-12-13 2005-03-03 Zhibin Zheng Method of selecting encrypting arithmetric for realizing communication of secrecy
US20050090259A1 (en) * 2003-10-24 2005-04-28 Qualcomm Incorporated Handoff between a wireless local area network and a cellular communication system
US20050272481A1 (en) * 2004-05-10 2005-12-08 Lg Electronics Inc. Minimized IP connectivity establishment procedures
CN1710985A (en) 2005-06-30 2005-12-21 中国科学院计算技术研究所 Enciphered consulating method for speech-sound communication in grouped network
US20060073849A1 (en) * 2004-09-30 2006-04-06 Koji Kuriki Mobile radio communication system
CN1795656A (en) 2003-05-23 2006-06-28 艾利森电话股份有限公司 Secure traffic redirection in a mobile communication system
CN1801698A (en) 2005-01-07 2006-07-12 华为技术有限公司 Method for ensuring media stream safety in IP multimedia service subsystem network
US20060182280A1 (en) 2005-02-11 2006-08-17 Pekka Laitinen Method and apparatus for providing bootstrapping procedures in a communication network
US20060276226A1 (en) * 2003-08-13 2006-12-07 Roamware, Inc. Signaling gateway with Multiple IMSI with Multiple MSISDN (MIMM) service in a single SIM for multiple roaming partners
US7190793B2 (en) 2002-06-20 2007-03-13 Qualcomm Incorporated Key generation in a communication system
CN1937487A (en) 2005-09-22 2007-03-28 北京三星通信技术研究有限公司 LTE authentication and encryption method
US20070086591A1 (en) 2005-10-13 2007-04-19 Telefonaktiebolaget Lm Ericsson (Publ) Method and apparatus for establishing a security association
CN1953374A (en) 2006-09-21 2007-04-25 中国船舶重工集团公司第七○九研究所 Safety guide model for distributed identity authentication in mobile self-organizing network
US20070117575A1 (en) 2005-11-07 2007-05-24 Alcatel Method for connection re-establishment in a mobile communciation system
CN1983921A (en) 2005-12-16 2007-06-20 华为技术有限公司 Method and system for realizing end to end media fluid safety
WO2007078159A1 (en) 2006-01-04 2007-07-12 Samsung Electronics Co., Ltd. Method and apparatus for transmitting sip data of idle mode ue in a mobile communication system
CN101005692A (en) 2006-01-20 2007-07-25 北京三星通信技术研究有限公司 Method for reducing terminal switch between LTE and 3G cut-in technology
US20070210894A1 (en) 2003-10-31 2007-09-13 Ae-Soon Park Method for Authenticating Subscriber Station, Method for Configuring Protocol Thereof, and Apparatus Thereof in Wireless Protable Internet System
US20070218903A1 (en) 2006-02-28 2007-09-20 Nokia Corporation Handover in communication networks
US20070224993A1 (en) 2006-03-27 2007-09-27 Nokia Corporation Apparatus, method and computer program product providing unified reactive and proactive handovers
US20070249352A1 (en) * 2006-03-31 2007-10-25 Samsung Electronics Co., Ltd. System and method for optimizing authentication procedure during inter access system handovers
US20070254656A1 (en) * 2006-05-01 2007-11-01 Nokia Corporation Apparatus, method and computer program product providing uplink synchronization through use of dedicated uplink resource assignment
US20070291673A1 (en) * 2006-06-20 2007-12-20 Mustafa Demirhan Adaptive DRX Cycle Length Based on Available Battery Power
US20070297367A1 (en) 2006-06-19 2007-12-27 Interdigital Technology Corporation Method and apparatus for security protection of an original user identity in an initial signaling message
US20080010677A1 (en) * 2006-06-26 2008-01-10 Nokia Corporation Apparatus, method and computer program product providing improved sequence number handling in networks
US20080014930A1 (en) * 2006-05-31 2008-01-17 Nokia Corporation Managing user profile information
US20080020745A1 (en) 2006-04-05 2008-01-24 Samsung Electronics Co., Ltd. Method and apparatus for supporting communication service of idle user terminal located in common routing area in a mobile communication system
US20080025263A1 (en) 2006-06-16 2008-01-31 Nokia Corporation Apparatus and method for transferring PDP context information for a terminal in the case of intersystem handover
US20080031159A1 (en) 2006-06-16 2008-02-07 Nokia Corporation Changing LTE specific anchor with simple tunnel switching
US20080039087A1 (en) * 2006-07-14 2008-02-14 Gallagher Michael D Generic Access to the Iu Interface
US20080039086A1 (en) * 2006-07-14 2008-02-14 Gallagher Michael D Generic Access to the Iu Interface
US20080043669A1 (en) * 2006-07-14 2008-02-21 Gallagher Michael D Generic Access to the Iu Interface
US20080095111A1 (en) * 2004-03-31 2008-04-24 Kim Young-Lak Method for Hand-Over Between Asynchronous Communication Network and Synchronous Communication Network of Multi Mode Multi Band Mobile Communication Terminal and Mobile Communication Terminal Therefor
US20080095362A1 (en) * 2006-10-18 2008-04-24 Rolf Blom Cryptographic key management in communication networks
US20080102896A1 (en) 2006-10-30 2008-05-01 Interdigital Technology Corporation Method and apparatus for implementing tracking area update and cell reselection in a long term evolution system
US20080101400A1 (en) 2006-10-30 2008-05-01 Nokia Corporation Managing attachment of a wireless terminal to local area networks
US20080161039A1 (en) * 2005-01-05 2008-07-03 Sk Telecom Co., Ltd. Dual Band/Dual Mode Mobile Communication Terminal and Control Method Thereof
US20080184032A1 (en) 2006-10-20 2008-07-31 Changhong Li Generating keys for protection in next generation mobile networks
US20080188200A1 (en) 2007-02-02 2008-08-07 Nokia Corporation Security key generation for wireless communications
US20080207168A1 (en) 2007-02-23 2008-08-28 Nokia Corporation Fast update message authentication with key derivation in mobile IP systems
US20080299979A1 (en) * 2006-01-12 2008-12-04 Min-Suk Ko Handoff Method and Apparatus for Terminal Based on Efficient Set Management in Communication System
US20080301434A1 (en) 2007-05-30 2008-12-04 Wassim Haddad Method and apparatus for combining internet protocol authentication and mobility signaling
US20090025060A1 (en) 2007-07-18 2009-01-22 Interdigital Technology Corporation Method and apparatus to implement security in a long term evolution wireless device
US20090067628A1 (en) 2005-04-26 2009-03-12 Vodafone Group Plc Telecommunications networks
US20090073933A1 (en) 2007-09-18 2009-03-19 Telefonaktiebolaget Lm Ericsson (Publ) Inter-system handoffs in multi-access environments
US7564977B2 (en) * 2004-02-27 2009-07-21 International Business Machines Corporation System, method and program product for anonymous transfer of messages
US20090221306A1 (en) 2006-02-10 2009-09-03 T-Mobile International Ag & Co. Kg Method for Carrying Out Paging in a Cellular Mobile Communication System
US20090275309A1 (en) 2007-05-08 2009-11-05 He Chengdong Security capability negotiation method, system, and equipment
US20100080171A1 (en) * 2007-01-15 2010-04-01 Telefonaktiebolaget Lm Ericsson Method and arrangements for circuit switched services in communication networks
US20100190500A1 (en) 2006-09-28 2010-07-29 Samsung Electronics Co., Ltd. System and method of providing user equipment initiated and assisted backward handover in heterogeneous wireless networks
EP2214444A1 (en) 2009-01-30 2010-08-04 Nec Corporation Method for optimizing the reduction of mobility signalling at inter-rat change
US20100235634A1 (en) 2006-03-22 2010-09-16 Patrick Fischer Security considerations for the lte of umts
US7929703B2 (en) 2005-12-28 2011-04-19 Alcatel-Lucent Usa Inc. Methods and system for managing security keys within a wireless network
US20110093919A1 (en) * 2007-01-04 2011-04-21 Naeslund Mats Method and Apparatus for Determining an Authentication Procedure
US8027304B2 (en) 2005-07-06 2011-09-27 Nokia Corporation Secure session keys context
US20110235505A1 (en) * 2010-03-29 2011-09-29 Hitachi, Ltd. Efficient deployment of mobility management entity (MME) with stateful geo-redundancy
US8078753B2 (en) 2005-09-19 2011-12-13 Panasonic Corporation Enabling simultaneous use of home network and foreign network by a multihomed mobile node
US20120020347A1 (en) * 2009-04-08 2012-01-26 Vincente De Vega De La Red Mobility management in a communications system
US8165054B2 (en) 2006-10-17 2012-04-24 Panasonic Corporation Multicast service provision in a mobile communication system having overlapping pool areas
US8170566B2 (en) 2006-05-02 2012-05-01 Vodafone Group Plc Telecommunications network
US20140016614A1 (en) * 2011-04-05 2014-01-16 Panasonic Corporation Short message transmission and handover procedures
US8917698B2 (en) 2006-08-18 2014-12-23 Telefonaktiebolaget L M Ericsson (Publ) Intersystem change involving mapping between different types of radio bearers
US9060268B2 (en) 2007-09-29 2015-06-16 Huawei Technologies Co., Ltd. Negotiating security capabilities during movement of UE

Patent Citations (90)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6028933A (en) 1997-04-17 2000-02-22 Lucent Technologies Inc. Encrypting method and apparatus enabling multiple access for multiple services and multiple transmission modes over a broadband communication network
US20030169725A1 (en) 2000-05-17 2003-09-11 Kalle Ahmavaara Connections in a comunication system
US20020052200A1 (en) 2000-09-11 2002-05-02 Jari Arkko Secured map messages for telecommunications networks
US20040053607A1 (en) * 2000-10-13 2004-03-18 Hans Ronneke Communication system supporting wireless communication of packet data and method and arrangement relating thereto
US20020066011A1 (en) * 2000-11-28 2002-05-30 Nokia Corporation System for ensuring encrypted communication after handover
US20020071558A1 (en) 2000-12-11 2002-06-13 Sarvar Patel Key conversion system and method
EP1282321B1 (en) 2001-08-02 2005-02-09 Telefonaktiebolaget LM Ericsson (publ) System and method for load sharing within a core network
WO2003037021A1 (en) 2001-10-19 2003-05-01 Nokia Corporation Forwarding a terminal identity between core network nodes
US20050047597A1 (en) * 2001-12-13 2005-03-03 Zhibin Zheng Method of selecting encrypting arithmetric for realizing communication of secrecy
US20030139180A1 (en) 2002-01-24 2003-07-24 Mcintosh Chris P. Private cellular network with a public network interface and a wireless local area network extension
US7190793B2 (en) 2002-06-20 2007-03-13 Qualcomm Incorporated Key generation in a communication system
CN1455556A (en) 2003-05-14 2003-11-12 东南大学 Wireless LAN safety connecting-in control method
CN1795656A (en) 2003-05-23 2006-06-28 艾利森电话股份有限公司 Secure traffic redirection in a mobile communication system
US20070186000A1 (en) 2003-05-23 2007-08-09 Pekka Nikander Secure traffic redirection in a mobile communication system
US20060276226A1 (en) * 2003-08-13 2006-12-07 Roamware, Inc. Signaling gateway with Multiple IMSI with Multiple MSISDN (MIMM) service in a single SIM for multiple roaming partners
US20050090259A1 (en) * 2003-10-24 2005-04-28 Qualcomm Incorporated Handoff between a wireless local area network and a cellular communication system
US20070210894A1 (en) 2003-10-31 2007-09-13 Ae-Soon Park Method for Authenticating Subscriber Station, Method for Configuring Protocol Thereof, and Apparatus Thereof in Wireless Protable Internet System
US7564977B2 (en) * 2004-02-27 2009-07-21 International Business Machines Corporation System, method and program product for anonymous transfer of messages
US20080095111A1 (en) * 2004-03-31 2008-04-24 Kim Young-Lak Method for Hand-Over Between Asynchronous Communication Network and Synchronous Communication Network of Multi Mode Multi Band Mobile Communication Terminal and Mobile Communication Terminal Therefor
US20050272481A1 (en) * 2004-05-10 2005-12-08 Lg Electronics Inc. Minimized IP connectivity establishment procedures
CN1589060A (en) 2004-09-30 2005-03-02 西安西电捷通无线网络通信有限公司 Method for realizing self surrogate function for mobile node
US20060073849A1 (en) * 2004-09-30 2006-04-06 Koji Kuriki Mobile radio communication system
US20080161039A1 (en) * 2005-01-05 2008-07-03 Sk Telecom Co., Ltd. Dual Band/Dual Mode Mobile Communication Terminal and Control Method Thereof
US20140169563A1 (en) 2005-01-07 2014-06-19 Inventergy, Inc. Method for ensuring media stream security in ip multimedia sub-system
CN1801698A (en) 2005-01-07 2006-07-12 华为技术有限公司 Method for ensuring media stream safety in IP multimedia service subsystem network
US8582766B2 (en) 2005-01-07 2013-11-12 Inventergy, Inc. Method for ensuring media stream security in IP multimedia sub-system
US20060182280A1 (en) 2005-02-11 2006-08-17 Pekka Laitinen Method and apparatus for providing bootstrapping procedures in a communication network
US20090067628A1 (en) 2005-04-26 2009-03-12 Vodafone Group Plc Telecommunications networks
US8213903B2 (en) 2005-04-26 2012-07-03 Vodafone Group Plc Telecommunications networks
CN1710985A (en) 2005-06-30 2005-12-21 中国科学院计算技术研究所 Enciphered consulating method for speech-sound communication in grouped network
US8027304B2 (en) 2005-07-06 2011-09-27 Nokia Corporation Secure session keys context
US8078753B2 (en) 2005-09-19 2011-12-13 Panasonic Corporation Enabling simultaneous use of home network and foreign network by a multihomed mobile node
CN1937487A (en) 2005-09-22 2007-03-28 北京三星通信技术研究有限公司 LTE authentication and encryption method
US20070086591A1 (en) 2005-10-13 2007-04-19 Telefonaktiebolaget Lm Ericsson (Publ) Method and apparatus for establishing a security association
US8515462B2 (en) 2005-11-07 2013-08-20 Alcatel Lucent Method for connection re-establishment in a mobile communication system
US20070117575A1 (en) 2005-11-07 2007-05-24 Alcatel Method for connection re-establishment in a mobile communciation system
CN1983921A (en) 2005-12-16 2007-06-20 华为技术有限公司 Method and system for realizing end to end media fluid safety
US7929703B2 (en) 2005-12-28 2011-04-19 Alcatel-Lucent Usa Inc. Methods and system for managing security keys within a wireless network
WO2007078159A1 (en) 2006-01-04 2007-07-12 Samsung Electronics Co., Ltd. Method and apparatus for transmitting sip data of idle mode ue in a mobile communication system
US20080299979A1 (en) * 2006-01-12 2008-12-04 Min-Suk Ko Handoff Method and Apparatus for Terminal Based on Efficient Set Management in Communication System
CN101005692A (en) 2006-01-20 2007-07-25 北京三星通信技术研究有限公司 Method for reducing terminal switch between LTE and 3G cut-in technology
US20090221306A1 (en) 2006-02-10 2009-09-03 T-Mobile International Ag & Co. Kg Method for Carrying Out Paging in a Cellular Mobile Communication System
US20070218903A1 (en) 2006-02-28 2007-09-20 Nokia Corporation Handover in communication networks
US20100235634A1 (en) 2006-03-22 2010-09-16 Patrick Fischer Security considerations for the lte of umts
US20070224993A1 (en) 2006-03-27 2007-09-27 Nokia Corporation Apparatus, method and computer program product providing unified reactive and proactive handovers
US8462742B2 (en) 2006-03-31 2013-06-11 Samsung Electronics Co., Ltd System and method for optimizing authentication procedure during inter access system handovers
JP2009531952A (en) 2006-03-31 2009-09-03 サムスン エレクトロニクス カンパニー リミテッド System and method for optimizing authentication procedure during handover between access systems
US20070249352A1 (en) * 2006-03-31 2007-10-25 Samsung Electronics Co., Ltd. System and method for optimizing authentication procedure during inter access system handovers
US20080020745A1 (en) 2006-04-05 2008-01-24 Samsung Electronics Co., Ltd. Method and apparatus for supporting communication service of idle user terminal located in common routing area in a mobile communication system
US20070254656A1 (en) * 2006-05-01 2007-11-01 Nokia Corporation Apparatus, method and computer program product providing uplink synchronization through use of dedicated uplink resource assignment
US8170566B2 (en) 2006-05-02 2012-05-01 Vodafone Group Plc Telecommunications network
US20080014930A1 (en) * 2006-05-31 2008-01-17 Nokia Corporation Managing user profile information
US8107433B2 (en) 2006-06-16 2012-01-31 Nokia Corporation Changing LTE specific anchor with simple tunnel switching
JP2009540721A (en) 2006-06-16 2009-11-19 ノキア コーポレイション Apparatus and method for transferring PDP context of terminal in case of inter-system handover
US8599797B2 (en) 2006-06-16 2013-12-03 Nokia Corporation Apparatus and method for transferring PDP context information for a terminal in the case of intersystem handover
US20080031159A1 (en) 2006-06-16 2008-02-07 Nokia Corporation Changing LTE specific anchor with simple tunnel switching
US20080025263A1 (en) 2006-06-16 2008-01-31 Nokia Corporation Apparatus and method for transferring PDP context information for a terminal in the case of intersystem handover
US20070297367A1 (en) 2006-06-19 2007-12-27 Interdigital Technology Corporation Method and apparatus for security protection of an original user identity in an initial signaling message
US20070291673A1 (en) * 2006-06-20 2007-12-20 Mustafa Demirhan Adaptive DRX Cycle Length Based on Available Battery Power
US20080010677A1 (en) * 2006-06-26 2008-01-10 Nokia Corporation Apparatus, method and computer program product providing improved sequence number handling in networks
US20080043669A1 (en) * 2006-07-14 2008-02-21 Gallagher Michael D Generic Access to the Iu Interface
US20080039086A1 (en) * 2006-07-14 2008-02-14 Gallagher Michael D Generic Access to the Iu Interface
US20080039087A1 (en) * 2006-07-14 2008-02-14 Gallagher Michael D Generic Access to the Iu Interface
US8917698B2 (en) 2006-08-18 2014-12-23 Telefonaktiebolaget L M Ericsson (Publ) Intersystem change involving mapping between different types of radio bearers
CN1953374A (en) 2006-09-21 2007-04-25 中国船舶重工集团公司第七○九研究所 Safety guide model for distributed identity authentication in mobile self-organizing network
US20100190500A1 (en) 2006-09-28 2010-07-29 Samsung Electronics Co., Ltd. System and method of providing user equipment initiated and assisted backward handover in heterogeneous wireless networks
US8165054B2 (en) 2006-10-17 2012-04-24 Panasonic Corporation Multicast service provision in a mobile communication system having overlapping pool areas
US8094817B2 (en) 2006-10-18 2012-01-10 Telefonaktiebolaget Lm Ericsson (Publ) Cryptographic key management in communication networks
US20080095362A1 (en) * 2006-10-18 2008-04-24 Rolf Blom Cryptographic key management in communication networks
US20080184032A1 (en) 2006-10-20 2008-07-31 Changhong Li Generating keys for protection in next generation mobile networks
US20080102896A1 (en) 2006-10-30 2008-05-01 Interdigital Technology Corporation Method and apparatus for implementing tracking area update and cell reselection in a long term evolution system
US20080101400A1 (en) 2006-10-30 2008-05-01 Nokia Corporation Managing attachment of a wireless terminal to local area networks
US20110093919A1 (en) * 2007-01-04 2011-04-21 Naeslund Mats Method and Apparatus for Determining an Authentication Procedure
US20100080171A1 (en) * 2007-01-15 2010-04-01 Telefonaktiebolaget Lm Ericsson Method and arrangements for circuit switched services in communication networks
US20080188200A1 (en) 2007-02-02 2008-08-07 Nokia Corporation Security key generation for wireless communications
US20080207168A1 (en) 2007-02-23 2008-08-28 Nokia Corporation Fast update message authentication with key derivation in mobile IP systems
US8117454B2 (en) 2007-02-23 2012-02-14 Nokia Corporation Fast update message authentication with key derivation in mobile IP systems
US8774759B2 (en) 2007-05-08 2014-07-08 Huawei Technologies Co., Ltd. Security capability negotiation method, system, and equipment
JP2010521905A (en) 2007-05-08 2010-06-24 華為技術有限公司 Security function negotiation method, system, and apparatus
US20090275309A1 (en) 2007-05-08 2009-11-05 He Chengdong Security capability negotiation method, system, and equipment
US8533455B2 (en) 2007-05-30 2013-09-10 Telefonaktiebolaget L M Ericsson (Publ) Method and apparatus for combining internet protocol authentication and mobility signaling
US20080301434A1 (en) 2007-05-30 2008-12-04 Wassim Haddad Method and apparatus for combining internet protocol authentication and mobility signaling
JP2010528559A (en) 2007-05-30 2010-08-19 テレフオンアクチーボラゲット エル エム エリクソン（パブル） Method and apparatus for combining internet protocol authentication and mobility signaling
US20090025060A1 (en) 2007-07-18 2009-01-22 Interdigital Technology Corporation Method and apparatus to implement security in a long term evolution wireless device
US20090073933A1 (en) 2007-09-18 2009-03-19 Telefonaktiebolaget Lm Ericsson (Publ) Inter-system handoffs in multi-access environments
US9060268B2 (en) 2007-09-29 2015-06-16 Huawei Technologies Co., Ltd. Negotiating security capabilities during movement of UE
EP2214444A1 (en) 2009-01-30 2010-08-04 Nec Corporation Method for optimizing the reduction of mobility signalling at inter-rat change
US20120020347A1 (en) * 2009-04-08 2012-01-26 Vincente De Vega De La Red Mobility management in a communications system
US20110235505A1 (en) * 2010-03-29 2011-09-29 Hitachi, Ltd. Efficient deployment of mobility management entity (MME) with stateful geo-redundancy
US20140016614A1 (en) * 2011-04-05 2014-01-16 Panasonic Corporation Short message transmission and handover procedures

Non-Patent Citations (87)

* Cited by examiner, † Cited by third party
Title
"3GPP TS 29.060 V7.7.0 (Sep. 2007), 3rd Generation Partnership Project;Technical Specification Group Core Network and Terminals;General Packet Radio Service (GPRS); GPRS Tunnelling Protocol (GTP)across the Gn and Gp Interface(Release 7), 143 pages".
3GPP TR 23.882 V1.11.0,3rd Generation Partnership Project;Technical Specification Group Services and System Aspects;3GPP System Architecture Evolution:Report on Technical Options and Conclusions(Release 7),Jul. 2007, total 211 pages.
3GPP TR 33.821 V0.4.0,3rd Generation Partnership Project;Technical Specification Group Services and System Aspects;Rationale and track of security decisions in Long Term Evolved (LTE) RAN / 3GPP System Architecture Evolution(SAE) (Release 8), Jul. 2007,total 95 pages.
3GPP TR 88.821 V0.4.0, 3rd Generation Partnership Project;Technical Specification Group Services and System Aspects;Rationale and track of security decisions in Long Term Evolved(LTE) RAN/ 3GP System Architecture Evolution(SAE)(Release 8), Jul. 2007,total 94 pages.
3GPP TS 23.060 V7.4.0,3rd Generation Partnership Project;Technical Specification Group Services and System Aspects;General Packet Radio Service (GPRS);Service description;Stage 2(Release 7),Mar. 2007,total 216 pages.
3GPP TS 23.401 V1.1.0,3rd Generation Partnership Project;Technical Specification Group Services and System Aspects;GPRS enhancements for E-UTRAN access(Release 8),Jul. 2007,total 102 pages.
3GPP TS 23.401 V1.1.0,3rd Generation Partnership Project;Technical Specification Group Services and System Aspects;GPRS enhancements for E-UTRAN access(Release 8),Jul. 2007,total 78 pages.
3GPP TS 23.401 V1.1.0,3rd Generation Partnership Project;Technical Specification Group Services and System Aspects;GPRS enhancements for E-UTRAN access(Release 8),Jul. 2007,total 83 pages.
3GPP TS 23.401 V132.0,3rd Generation Partnership Project;Technical Specification Group Services and System Aspects;GPRS enhancements for E-UTRAN access(Release 13) ,Mar. 2015,total 331 pages.
3GPP TS 24.008 V7.8.0,3rd Generation Partnership Project;Technical Specification Group Core Network and Terminals;Mobile radio interface Layer 3 specification;Core network protocols; Stage 3(Release 7),Jun. 2007,total 547 pages.
3GPP TS 24.008 V7.9.0,3rd Generation Partnership Project;Technical Specification Group Core Network and Terminals; Mobile radio interface Layer 3 specification:Core network protocols; Stage 3(Release 7),Sep. 2007, total 549 pages.
3GPP TS 25.304 V3.14.0,3rd Generation Partnership Project;Technical Specification Group Radio Access Network; User Equipment (UE) procedures in idle mode and procedures for cell reselection in connected mode (Release 1999), Mar. 2004,total 41 pages.
3GPP TS 29.060 V8.0.0,3rd Generation Partnership Project;Technical Specification Group Core Network and Terminals;General Packet Radio Service (GPRS);GPRS Tunnelling Protocol (GTP) across the Gn and Gp interface (Release 8),Jun. 2007,total 150 pages.
3GPP TS 33.102 V7.1.0,3rd Generation Partnership Project;Technical Specification Group Services and System Aspects;3G Security;Security architecture(Release 7),Dec. 2006,total 64 pages.
3GPP TS 33.102 V7.1.0,3rd Generation Partnership Project;Technical Specification Group Services and System Aspects;3G Security;Security architecture(Release 7),Dec. 2006,total 70 pages.
3GPP TSG SA WG2 Architecture-S2 Rel-8 Ad-hoc S2-071399,"Tracking Area Update with CN Node Change", Nokia, Siemens Networks, Mar. 26-30, 2007,total 7 pages.
3GPP TSG SA WG2 Architecture—S2 Rel-8 Ad-hoc S2-071399,"Tracking Area Update with CN Node Change", Nokia, Siemens Networks, Mar. 26-30, 2007,total 7 pages.
3GPP TSG SA WG2 Architecture-S2#56c Rel-8 Ad-hoc S2-071124,"Attach signalling flows",Huawei, Mar. 26-30, 2007,total 5 pages.
3GPP TSG SA WG2 Architecture—S2#56c Rel-8 Ad-hoc S2-071124,"Attach signalling flows",Huawei, Mar. 26-30, 2007,total 5 pages.
3GPP TSG SA WG2 Architecture-S2#58 52-073102(e-mail revision 5 of S2-072966),"Tracking Area Update GERAN-E-UTRAN",Ericsson,Jun. 25-29, 2007,total 6 pages.
3GPP TSG SA WG2 Architecture—S2#58 52-073102(e-mail revision 5 of S2-072966),"Tracking Area Update GERAN—E-UTRAN",Ericsson,Jun. 25-29, 2007,total 6 pages.
3GPP TSG SA WG2 Architecture-S2#58 52-073103(e-mail revision 1 of S2-072967),"Tracking Area Update UMTS-E-UTRAN",Ericsson,Jun. 25-29, 2007,total 7 pages.
3GPP TSG SA WG2 Architecture—S2#58 52-073103(e-mail revision 1 of S2-072967),"Tracking Area Update UMTS—E-UTRAN",Ericsson,Jun. 25-29, 2007,total 7 pages.
3GPP TSG SA WG2 Architecture-S2#58 S2-072966,"Tracking Area Update GERAN-E-UTRAN",Ericsson,Jun. 25-29, 2007,total 6 pages.
3GPP TSG SA WG2 Architecture—S2#58 S2-072966,"Tracking Area Update GERAN—E-UTRAN",Ericsson,Jun. 25-29, 2007,total 6 pages.
3GPP TSG SA WG2 Architecture-S2#58 S2-072967,"Tracking Area Update UMTS-E-UTRAN",Ericsson,Jun. 25-29, 2007,total 7 pages.
3GPP TSG SA WG2 Architecture—S2#58 S2-072967,"Tracking Area Update UMTS—E-UTRAN",Ericsson,Jun. 25-29, 2007,total 7 pages.
3GPP TSG SA WG3 Security-S3#48 S3-070529,"Pseudo-CR to TR 33.821: Key handling on idle mode mobility", Nokia Siemens Networks, Nokia,Jul. 10-13, 2007,total 3 pages.
3GPP TSG SA WG3 Security—S3#48 S3-070529,"Pseudo-CR to TR 33.821: Key handling on idle mode mobility", Nokia Siemens Networks, Nokia,Jul. 10-13, 2007,total 3 pages.
3GPP TSG SA WG3 Security-S3#49 S3-070685,"Key handling on idle mode mobility from UTRAN to E-UTRAN", Huawei, Oct. 8-12, 2007,total 2 pages.
3GPP TSG SA WG3 Security—S3#49 S3-070685,"Key handling on idle mode mobility from UTRAN to E-UTRAN", Huawei, Oct. 8-12, 2007,total 2 pages.
3GPP TSG SA WG3 Security-SA3#46b s3-070232,"Pseudo-Change Request to TR 33.821: Update of sections 7.4.11 and 7.4.12 on active and idle mode mobility of user-related keys in SAE/LTE",Nokia, Siemens Networks, Mar. 28-29, 2007,total 6 pages.
3GPP TSG SA WG3 Security—SA3#46b s3-070232,"Pseudo-Change Request to TR 33.821: Update of sections 7.4.11 and 7.4.12 on active and idle mode mobility of user-related keys in SAE/LTE",Nokia, Siemens Networks, Mar. 28-29, 2007,total 6 pages.
3GPP TSG SA WG3 Security-SA3#47 S3-070304,"Key handling on idle mode mobility",Nokia Siemens Networks, Nokia,May 22-25, 2007,total 2 pages.
3GPP TSG SA WG3 Security—SA3#47 S3-070304,"Key handling on idle mode mobility",Nokia Siemens Networks, Nokia,May 22-25, 2007,total 2 pages.
3rd Generation Partnership Project; Technical Specification Group Services and System Aspects; GPRS enhancements for E-UTRAN access (Release 8); 3GPP Standard: 3GPP TS 23.401 V1.1.0, Jul. 2007. *
3rd Generation Partnership Project; Technical Specification Group Services and System Aspects; Rationale and track of security decisions in Long Term Evolved (Release 8); 3GPP Standard: 3GPP TR 33.821 V0.4.0, Jul. 2007. *
A.R. Prasad et al.,"An Evolutionary Approach rowards Ubiquitous Communications: A Security Perspective", Computer Society, 2014,total 7 pages.
Case Management and Scheduling Order 37 C.F.R. § 42.5, Case IPR2017-00661,U.S. Pat. No. 9,060,268 B2, dated Jul. 28, 2017. total 10 pages.
Decision Institution of Inter Partes Review 37 C.F.R. § 42.108, Case IPR2017-00661,U.S. Pat. No. 9,060,268 B2, dated Jul. 28, 2017. total 35 pages.
ETSI TS 143 020 V7.0.0,Digital cellular telecommunications system (Phase 2+);Security-related network functions (3GPP TS 43.020 version 7.0.0 Release 7),Jun. 2007,total 112 pages.
Exhibit B-1,TS 23.401 V1.1.1, GPRS Enhancements for E-UTRAN Access (dated Aug. 13, 2007) and TR 33.821 V0.4.0, Rationale and track of security decisions in Long Term Evolved (LTE) RAN / 3GPP System Architecture Evolution (from Jul. 2007),Aug. 11, 2016,total 27 pages.
Exhibit B-2,TS 23.060 V1.1.1, General Packet Radio Service (GPRS) Service Description (dated Mar. 20, 2007) and TR 33.821 V0.4.0,Rationale and track of security decisions in Long Term Evolved (LTE) RAN / 3GPP System Architecture Evolution (from Jul. 2007),Aug. 11, 2016,total 61 pages.
Exhibit B-3,U.S. Pat. No. 8,462,742 ("The '742 patent") and TR 33.821 V0.4.0, Rationale and track of security Decisions in Long Term Evolved (LTE) RAN / 3GPP System Architecture Evolution (from Jul. 2007),Aug. 11, 2016,total 29 pages.
Exhibit B-4,Heikki Kaaranen et al., UMTS Networks: Architecture, Mobility and Services, 2nd Ed. (John Wiley & Sons Ltd.) (2006)("UMTS Networks") and TR 33.821 V0.4.0, Rationale and track of security decisions in Long Term Evolved (LTE) RAN / 3GPP System Architecture Evolution (from Jul. 2007) ("TR 33.821 V0.4.0"),Aug. 11, 2016,total 35 pages.
Exhibit B-5,TS 23.401 V1.1.1, GPRS Enhancements for E-UTRAN Access (dated Aug. 13, 2007), TS 23.060 V1.1.1, General Packet Radio Service (GPRS) Service Description (dated Mar. 20, 2007), and TR 33.821 V0.4.0, Rationale and track of security decisions in Long Term Evolved (LTE) RAN / 3GPP System Architecture Evolution (from Jul. 2007),Aug. 11, 2016,total 72 pages.
Heikki Kaaranen et al.,"UMTS Networks-Architecture, Mobility and Services",Second Edition, John Wiley&Sons;Ltd, 2005,total 413 pages.
Heikki Kaaranen et al.,"UMTS Networks—Architecture, Mobility and Services",Second Edition, John Wiley&Sons;Ltd, 2005,total 413 pages.
Huawei Techs. Co. v. T-Mobile US, Inc., Case No. 2:16-CV-00057-JRG-RSP. United States District Court for the Eastern District of Texas Marshall Division; Decided Jun. 21, 2017. 42 pages. (Year: 2017). *
In the United States District Court for the Eastern District of Texas Marshall Division, Huawei Technologies Co. Ltd., v. T-Mobile US, Inc. and T-Mobile USA, Inc.,Civil Action No. 2:16-cv-0057-JRG-RSP,Jan. 20, 2017,total 37 pages.
In the United States District Court for the Eastern District of Texas Marshall Division, Huawei Technologies Co. Ltd.,v. T-Mobile US, Inc. and T-Mobile USA, Inc.,Civil Action No. 2:16-cv-0057-JRG-RSP,Feb. 17, 2017,total 14 pages.
Jung, SungHoon. Radio Protocols for LTE and LTE-Advanced, chapter 2. ISBN: 9781118188569, published by John Wiley & Sons. Sep. 2012. 3 pages. (Year: 2012). *
NSN268-1002 File History of U.S. Pat. No. 9,060,268,total 1012 pages.
NSN268-1003 Petitioner's Exhibit NSN268-1003,Declaration of David Lyon,Case: IPR2017-00661, Jan. 19, 2017,total 211 pages.
NSN268-1004 Petitioners' Exhibit NSN268-1004 Declaration of Balazs Bertenyi,Case: IPR2017-00661,Jan. 10, 2017,total 21 pages.
NSN268-1006 3GPP TR 33.821 V0.4.0,3rd Generation Partnership Project;Technical Specification Group Services and System Aspects; Rationale and track of security decisions in Long TermEvolved (LTE) RAN / 3GPP System Architecture Evolution(SAE)(Release 8),Jul. 2007,total 88 pages.
NSN268-1009 3GPP TS 23.401 V8.4.0,3rd Generation Partnership Project;Technical Specification Group Services and System Aspects;General Packet Radio Service (GPRS) enhancements forEvolved Universal Terrestrial Radio Access Network(E-UTRAN) access(Release 8),Dec. 2008,total 219 pages.
NSN268-1010 3GPP TR 21.905 V7.0.0,3rd Generation Partnership Project;Technical Specification Group Services and System Aspects;Vocabulary for 3GPP Specifications(Release 7),Sep. 2005,total 55 pages.
NSN268-1012,3GPP TS 33.401 V2.0.0,3rd Generation Partnership Project;Technical Specification Group Services and System Aspects;3GPP System Architecture Evolution (SAE):Security Architecture;(Release 8),May 2008,total 45 pages.
NSN268-1013,Technical Specification Group Services and System Aspects TSGS#34(06)060926,"Updated WID: 3GPP System Architecture Evolution Specification(SAES)",Motorola et al.,Dec. 4-7, 2006,total 4 pages.
NSN268-1014,"About 3GPP",http://www.3gpp.org/about3gpp,Jan. 10, 2017,total 4 pages.
NSN268-1015,Dan Forsberg et al.,"LTE Security", Second Edition, Wiley, 2013,total 11 pages.
NSN268-1016,"Home", the Mobile Broadband Standard, Jan. 10, 2017,total 2 pages.
NSN268-1017,"Home",the Mobile Broadband Standard GPRS,Jan. 10, 2017,total 2 pages.
NSN268-1018,First Amended Complaint for Patent Infringement,Civil Action No. 2:16-cv-00057, Jan. 29, 2016,total 29 pages.
NSN268-1019,Joint Claim Construction and Prehearing Statement,Civil Action No. 2:16-cv-00057-JRG-RSP, Dec. 9, 2016,total 72 pages.
NSN268-1020,"3GPP FAQs",the Mobile Broadband Standard EDGE,Jan. 12, 2017,total 11 pages.
NSN268-1021,"Delegates Comer",the Mobile Broadband Standard EDGE+,Jan. 12, 2017,total 5 pages.
NSN268-1022,"The Evolved Packet Core",The Mobile Broadband Standard LTEAdvanced Pro,Jan. 11, 2017,total 3 pages.
NSN268-1023,Technical Specification Group Services and System Aspects TSGS#39(08)0132,"Updated WID: 3GPP System Architecture Evolution Specification (SAES) to include Security Building blocks based on SP-070933 after accepting revision marks.",SA WG3, Mar. 10-13, 2008,total 5 pages.
NSN268-1024,3GPP TR 25.931 V8.0.0,3rd Generation Partnership Project;Technical Specification Group Radio Access Network;UTRAN functions, examples on signalling procedures(Release 8),Dec. 2008,total 130 pages.
NSN268-1025,3GPP TS 24.301 V8.0.0,3rd Generation Partnership Project;Technical Specification Group Core Network and Terminals;Non-Access-Stratum (NAS) protocol for Evolved Packet System (EPS);Stage 3(Release 8), Dec. 2008,total 221 pages.
NSN268-1026,Declaration of David L. Lyon,total 14 pages.
NSN268-1050,3GPP TR 21.900 V6.0.0,3rd Generation Partnership Project;Technical Specification Group Services and System Aspects;Technical Specification Group working methods(Release 5),Sep. 2003,total 33 pages.
Patent Owner's Preliminary Response,Case No. IPR2017-00661,U.S. Pat. No. 9,060,268, dated Jan. 5,2017, total 80 pages.
Patrick Horster,"Communications and Multimedia Security 2",Springer International Publishing, Cham, Sep. 23-24, 1996,total 19 pages.
Petition for Inter Partes Review,Case: IPR2017-00661,U.S. Pat. No. 9,060,268,dated Jan. 19, 2017,total 88 pages.
R. Rajavelsamy et al.,"Security Aspects of Inter-Access System Mobility Between 3GPP and Non-3GPP Networks (Invited Paper)",Communication Systems Software and Middieware and Workshop,2008,total 5 pages.
Rajavelsamy R* et al.,"A Novel Method for Authentication Optimization during Handover in Heterogeneous Wireless Networks", 2007 IEEE,total 5 pages.
S.Sargento et al.,"Ubiquitous Access through the Integration of Mobile Ad-hoc Networks",total 6 pages.
Shan Yeob Yeum et al.,"Security for Emerging Ubiquitous Networks",2005 IEEE,total 7 pages.
Steve Burnett et al.,"RSA Security's Official Guide to Cryptography",Osbome/McGraw-Hill, 2001,total 44 pages.
TSG-RAN Working Group 3 meeting #7 TSGR3#7(99)D49,"Proposed liaison statement to SA3,CN1,RAN2",Ericsson, Sep. 20-24, 1999,total 9 pages.
United States District Court Eastern District of Texas Marshall Division,Civil Action No. 2:16-cv-00057-JRG-RSP,Aug. 11, 2016,total 224 pages.
Valtteri Niemi et al.,"UMTS Security", John Wiley & Sons, Ltd, 2003,total 57 pages.
Victor Y.H. Kueh et al.,"Application of Context Transfer for Roaming in IP-Based Evolved 3G NETWOR", The 17th Annual IEEE International Symposium on Personal, Indoor and Mobile Radio Communication,2006,total 5 pages.
Warwick Ford et al.,"Secure Electronic Commerce-Building the Infrastructure for Digital Signatures and Encryption", Second Edition, Prentice Hall PTR, 2000,total 19 pages.

Also Published As

Publication number Publication date
CN101399767B (en) 2011-04-20
WO2009043278A1 (en) 2009-04-09
US20100159882A1 (en) 2010-06-24
CN101399767A (en) 2009-04-01
US20150264563A1 (en) 2015-09-17
EP2187561B1 (en) 2013-02-20
EP2187561A4 (en) 2011-04-27
EP2187561A1 (en) 2010-05-19
US20170127284A1 (en) 2017-05-04
US9060268B2 (en) 2015-06-16
US9572027B2 (en) 2017-02-14

Similar Documents

Publication Publication Date Title
US10548012B2 (en) Method, system and apparatus for negotiating security capabilities during movement of UE
US10595198B2 (en) Communication method and device
EP3576446B1 (en) Key derivation method
US8638936B2 (en) Security protected non-access stratum protocol operation supporting method in a mobile telecommunication system
EP2106190B1 (en) A method, system and device for preventing the degradation attack while terminal is moving
WO2009008627A2 (en) A method of establishing fast security association for handover between heterogeneous radio access networks
EP2648437B1 (en) Method, apparatus and system for key generation
CA2716291C (en) System and method for managing security key architecture in multiple security contexts of a network environment
CN113170369A (en) Method and apparatus for security context handling during an intersystem change
WO2022237561A1 (en) Communication method and apparatus
CN110933669A (en) Method for quickly registering cross-RAT user

Legal Events

Date Code Title Description
STPP Information on status: patent application and granting procedure in general

Free format text: FINAL REJECTION MAILED

STCV Information on status: appeal procedure

Free format text: NOTICE OF APPEAL FILED

STCV Information on status: appeal procedure

Free format text: APPEAL BRIEF (OR SUPPLEMENTAL BRIEF) ENTERED AND FORWARDED TO EXAMINER

STPP Information on status: patent application and granting procedure in general

Free format text: NOTICE OF ALLOWANCE MAILED -- APPLICATION RECEIVED IN OFFICE OF PUBLICATIONS

STCF Information on status: patent grant

Free format text: PATENTED CASE

MAFP Maintenance fee payment

Free format text: PAYMENT OF MAINTENANCE FEE, 4TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1551); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY

Year of fee payment: 4